VCF Automation: Verifying VMware Aria operations for logs (vRLI) Admin Status in a VCF Environment Using PowerShell & PowerVCF.

This script is designed to connect to the SDDC Manager, retrieve VMware Aria operations for logs (vRLI) server details, and then use SSH to check the admin status of the vRLI appliance's primary node.

Use Case: This script is ideal for VCF administrators who need to verify or audit the admin account status of VMware Aria operations for logs (vRLI) appliances, especially before performing maintenance or automation tasks.

What You’ll Need:

PowerShell with VCF cmdlets

• Valid credentials for:

  • VCF SDDC Manager

  • vRLI appliance (SSH root access)

• SSH access allowed to vRLI nodes

You can download this script from GitHub:

https://github.com/miltonaece/mscloudtechnology/blob/main/checkAdminStatus-vRLI.ps1

Let's talk about the script before executing it.

• Authenticate with SDDC Manager

  • A secure token is requested from the SDDC Manager using the Request-VCFToken command.

  • Then it connects to the VCF SDDC Manager using connect-VcfSddcManagerServer.

• Fetch vRLI Server Details

  • The script runs get-vrliServerDetail to retrieve metadata about the vRealize Log Insight (vRLI) server instance integrated with VCF.

  • This includes FQDNs for all the nodes in the vRLI cluster (e.g., node1, node2, node3).

• Identify the Primary Node

  • The script extracts the FQDN of the third node (assumed primary in this case) using $vRLIInfo.node3Fqdn.

  • Displays the primary node FQDN in the console.

• Prompt for Root Password

  • A prompt for the root password is included but commented out. (Can be enabled if interactive execution is needed.)

• SSH into the vRLI Primary Node

  • The script uses SSH to connect to the vRLI primary node and runs the built-in script:

    /usr/lib/loginsight/application/sbin/li-reset-admin-passwd.sh --checkAdminStatus

    
    

  • This command checks whether the admin account is enabled or needs to be reset.

Next, execute the script:

Successfully connected to the SDDC Manager and retrieved the access token:

The SDDC Manager accessed the main node of VMware Aria Operations for Logs and displayed the lock status of the Admins User after entering the root password of the primary vRLI node: